Threat Modelling as Heist
Every heist movie has the same six specialists. Cybersecurity also has six characters. It’s called STRIDE.
Cryptographic Eraser – Decoding The Myth
One of the most misleading assumptions is that a cryptographic eraser provides a 100% guarantee when data is encrypted.
Risk is Everywhere – CISSP Focus
Risk is dynamic. You are shooting a moving duck. You have to keep moving your gun.
Before And After CISSP
Some people take themselves seriously before CISSP.
Some take themselves seriously after becoming CISSP.
Making Risk Disappear
I drew a simple 4-panel comic with a magic trick who wants to disappear the risk, completely.
Move Your Gun
You have to move your gun to hit the duck. A sketch with a gun as security and a duck as an attacker.
Risk Is Fat. Fat is Risk.
Risk never disappears. Just like fat never disappears.
Cybersecurity As A Brake
Most people think cybersecurity slows down the business but it’s not true.
Learning is Not Frozen Pie
The ready-made answer from AI is like eating a frozen pie. It tastes good, but there is a difference.
CISSP Fire is KPA
Knowing CISSP is one thing. Passing is second. And applying is third.
The Gap and Gain of CISSP
Failing CISSP is a significant milestone. I realised that I was focusing on the gap. Not the gain.
If the house is data, who holds the key?
If your house is data, who holds the key? Three questions every CISSP must ask.
Make CISSP Paper Plane
This metaphorical story will provide clarity on whether you are already a CISSP or in the process of becoming one.
What does it feel like after passing CISSP?
I had a goosebump moment when I read “Congratulations” on my CISSP report.
CIA is ABC of Cybersecurity
The ABC of cybersecurity is CIA – confidentiality, integrity and availability.
Who owns the data?
Everyone says “own the data.” But who owns what?
Data Retention Lessons from Facebook
You deleted your Facebook. But did Facebook delete you?
(ISC)2 Code of Ethics
CISSP is not just about passing an exam. It’s about knowledge, trust and who you become after.
Story of CISSP Art
Two ideas and one decision to share my creative CISSP handwritten notes led me to CISSP As An Art.
CISSP is a beautiful seed
CISSP is a beautiful seed that needs daily nourishment.
CISO Brings Seatbelt
Why did the CISO bring a seat belt to the board meeting?
YesFlix Binge Cost
What if I told you a YESFLIX binge and a DDoS attack follow the same threat pattern?
Camp Continuity Plan
“Why do we need Plan B?”
CISO’s Zero-Trust Attack Plan
You cannot defend against digital attacks with physical controls.
Flood-prood BCP
How I made a CISSP art comic to explain the difference between BCP and DR.